Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/34352e3233322e35382e302f32342d3234203d3e20323733363833.roa
File:                     34352e3233322e35382e302f32342d3234203d3e20323733363833.roa (raw, json)
Hash identifier:          9dVs/rFhLEmScaRbFFiVSXPXewQw/rm97O6Xy7CCKNI=
Subject key identifier:   14:5A:F3:68:9A:5A:EA:7D:36:5E:99:C3:8E:75:2D:D1:48:30:16:97
Certificate issuer:       /CN=EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5
Certificate serial:       78BB08FCAA5D2A924F49BBF4FDE5702855A8D40E
Authority key identifier: EF:6C:B2:C4:9C:32:45:F8:CC:33:A1:8F:08:A1:0C:F9:B3:63:AC:B5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/34352e3233322e35382e302f32342d3234203d3e20323733363833.roa
Signing time:             Tue 09 Sep 2025 12:49:05 +0000
ROA not before:           Tue 09 Sep 2025 12:44:05 +0000
ROA not after:            Tue 08 Sep 2026 12:49:05 +0000
asID:                     273683
IP address blocks:        45.232.58.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.crl
                          rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 19:54:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:bb:08:fc:aa:5d:2a:92:4f:49:bb:f4:fd:e5:70:28:55:a8:d4:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5
        Validity
            Not Before: Sep  9 12:44:05 2025 GMT
            Not After : Sep  8 12:49:05 2026 GMT
        Subject: CN=145AF3689A5AEA7D365E99C38E752DD148301697
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:88:6e:60:8b:e5:c5:2e:42:6c:eb:d7:00:ed:
                    93:0b:07:0c:7c:f4:9c:5f:4a:ea:72:e1:5a:b1:0d:
                    82:e8:f8:67:c3:d7:ea:c9:62:b4:07:61:44:66:d8:
                    c7:c5:3d:3f:e1:00:3e:51:c7:35:b0:e6:fa:80:ce:
                    8f:fc:72:1c:e6:39:7e:51:e4:f4:37:51:1c:ba:2e:
                    fd:8b:e9:40:a3:1f:bc:e2:93:d3:78:e5:8d:74:0d:
                    a3:9d:ca:28:d7:d0:51:ca:51:d4:bc:86:e1:67:8b:
                    16:94:26:1f:78:dd:46:62:cf:e5:00:f6:59:be:b9:
                    ba:37:34:2c:97:f5:5a:28:fb:55:2b:c5:f5:a5:4d:
                    c1:fc:d9:95:9a:88:72:b7:2c:cc:0f:c7:48:77:92:
                    1e:5c:69:06:8e:c7:cc:3d:71:b2:96:8f:87:5c:1b:
                    f3:23:c5:fc:e2:bc:24:fa:48:31:9f:a1:bd:f7:29:
                    be:d6:be:db:17:5f:cb:19:0c:c1:a3:c0:60:77:f5:
                    f9:1c:55:13:82:f7:96:db:21:4f:75:b6:5a:89:8d:
                    44:27:43:14:ee:04:8d:35:63:a7:87:03:41:15:01:
                    e1:bf:bb:54:44:d0:6e:30:29:eb:54:e5:00:30:6c:
                    80:fe:1b:88:2a:76:f7:56:b3:de:9f:90:2e:b1:f6:
                    98:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:5A:F3:68:9A:5A:EA:7D:36:5E:99:C3:8E:75:2D:D1:48:30:16:97
            X509v3 Authority Key Identifier:
                keyid:EF:6C:B2:C4:9C:32:45:F8:CC:33:A1:8F:08:A1:0C:F9:B3:63:AC:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/34352e3233322e35382e302f32342d3234203d3e20323733363833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.58.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:da:1b:19:3d:83:1f:1a:72:35:d0:3b:49:a2:fa:6c:ce:ce:
         d8:85:42:19:29:3d:3b:b0:08:f1:d3:ed:c3:cf:27:3f:1f:2c:
         62:36:25:bd:b0:36:c4:f2:fe:17:c8:09:8b:ae:64:8b:47:51:
         3b:32:61:fb:89:66:bf:b7:47:c9:99:e6:51:c5:8b:4a:3d:7a:
         4c:f7:67:e7:cf:ed:1c:6c:4e:b9:de:56:f2:12:73:8e:40:b5:
         eb:71:ba:18:69:9c:b7:a9:cc:44:b1:8a:63:30:1e:43:c3:23:
         a2:0e:ab:45:0e:fc:05:59:e5:5a:c5:15:7a:d4:72:5f:27:72:
         d9:51:09:7c:94:1d:c9:f6:91:1a:89:b0:70:f9:07:90:ae:37:
         c2:2d:91:04:e6:59:3e:0e:a3:76:71:10:e9:e5:83:3f:3e:c5:
         eb:18:85:f0:bb:0f:2f:dc:8f:2b:ed:4c:c4:a8:50:90:f8:a5:
         6e:09:4d:df:9c:02:3b:cc:3f:e5:35:e6:22:c8:d1:66:14:60:
         62:cb:bc:2d:91:3a:76:f3:71:f5:e5:73:71:f3:a5:9f:52:ad:
         32:55:da:4b:8b:95:2e:12:86:d7:1b:64:52:f4:e4:7d:6e:12:
         e6:c1:6e:bd:2e:06:eb:e4:c2:d0:41:e1:25:ba:7c:77:b4:8e:
         a7:14:fc:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 19:35:30 2025 by rpki-client